Analysis

  • max time kernel
    135s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    08/09/2024, 03:41

General

  • Target

    d3752afe9f361e0af017f62fc4bc1711_JaffaCakes118.html

  • Size

    33KB

  • MD5

    d3752afe9f361e0af017f62fc4bc1711

  • SHA1

    d8f284875584f98a2e4791ee93f4fb18225ee889

  • SHA256

    ffcd0c82c5dd09e9461f0ba8e2700af9820bb0488ed7e154329c37387ed9b9c9

  • SHA512

    72ed137da299e5eb426d6f2351e45718141c857b79d7f765d680938275d1022c68bc4084aabe25b72711310a56e7cf05eb087ee5fbeffe9844bcf9f5912fc5c3

  • SSDEEP

    768:9TgTNojlIPVNNHcthkFYutyotqd1YR9L9krZh+POQ:ZENel0bN8teFdtXtC1y9L9krZh+POQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d3752afe9f361e0af017f62fc4bc1711_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1640
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1640 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2956

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f8ffb488b98d950edda3cad032aea73

    SHA1

    09daaa625476805a3f141fbda172214ea5980a9a

    SHA256

    6504315b3554f2db7424a7fb64bef2e57991184d28ee79bf252ff3a4e947e4a1

    SHA512

    829aac4b24027a6815c535986c35c141e5e5360fdb3d68338ea54177ac99c74d873f98052672246f404c77a2964cfdfeee6d1f77f83d3361ab214dbedecece66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7be670234b21cd28e6541149f74ee52b

    SHA1

    52fc4b25aec509c714c19f7615d60e4bc0c9b52b

    SHA256

    86eed55a90da2753dcbcb016f9c8f4ea487ec0c0254002d5b197686096f3155c

    SHA512

    b2aa38e8152f70c0ce63de46ee112abfe9846f22c142ae4f5e955462ee1958137adb414552f6c27ba7adbdd88f8526fe446fe66b64c67dbb0e500d16b935801b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00848f90bf0c4900703968fbabc9d26a

    SHA1

    0f3e97d15501b2f32f92f91e117fd2d81c132475

    SHA256

    7cadcaa834ccd726c14de2716794dcfab99006aa7a39f5f2b1694fa56ea1dc3e

    SHA512

    49a05b763688158963c8722892acde46c9576a6eb46a1c6edbcd07c3ed985cc7a47691c113ce9df308777c5029c5082cb886097a7182cd086e2cb3ad03541f5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cebffaad496329042aa99b88e4c6abcc

    SHA1

    1194e2b10dcd11ca5bd506d09745bd0a3b0e5056

    SHA256

    ff7abc6b9ba565b2a89557c18e504f63e8dfe7069be12708ab1e30855524aca2

    SHA512

    2c5093c3119db07a1c35476931b7edc1dd4603b897d2a16d166c9b33125a7bf1643aba437b6b7d1834580f5693ce67af24f9c6acad1b99fef607c78d76d91960

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80e1e415b00021e80505f5b307e9b5bc

    SHA1

    4b36ac566ea7af4e72c66cb6bce553af4594e576

    SHA256

    f9d15b060abd5594ad0c0ea279ebefb62dc294dc0a9edbad1289818cc64f51dc

    SHA512

    505bca246905cbfb62fa6b45c2f67c514cbf78db8967e43d1fc9b1c04c885ec71b8e1da96b05565db4674a4c6eaa8cbbafa910ca43e37668aaf4156214175a06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    addad1b37feb9a4a94e4e28d50be854c

    SHA1

    dc99458cb71d1ce180ab1a471c13a09bd373831c

    SHA256

    f0445ae6e14e3669c8ded8f3ac71a2a0dff6219e811dbd53ffe3db879cd7d13c

    SHA512

    89e2d7ee3078886437ab9aa016b78ef8fb7a49f4e6880b4cbf6a4a061ac8c265ad8a3bdb11e0ebdccad6e2d3affd8c15ef3ad5d431ede16c1c997596301a350f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61b8ac5560c9a1973912844ef640bbac

    SHA1

    0aa1487069c2b37280f8dda3dc174ccbe06b1e8a

    SHA256

    bd17a0b61e2cfa5aea59760cb39033bd5a131b667d36c3a53f25da28cf377117

    SHA512

    afea9b6dc52a0c1abbfb1c1c0cf18b207c52d70e27fd6fac5ba16caf2aa49647f893e210f65b7381725608d54a21cc906a8e17e924594ac9042addb6ae7d3d2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2624d0f5507455197ab00318dcd12083

    SHA1

    ad6154d433964f64ae1874dee29f1ab86197798c

    SHA256

    2102588ed59c1157beca130b37fc75e1831094ac9b39061805e5b3daf5b1e466

    SHA512

    b387018fce796c46e2044f96ef55f920f0199401933c396c976407e7511c0458841dcd69ab13c1c3e9f3739c46969c0ea47b542a6e1c9fa0dc65062290cc2da5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    982bc67f538f2d8404683ff9fbfe6dbc

    SHA1

    178c1aad902dd50fef9aa004f1eb11992b77f49d

    SHA256

    6a8c3e105a824474086d3e6cffaec9f411ec37a4dd74ae43adb837ec76394a8c

    SHA512

    341c55c18c04ccceb6ac3a6d8a1b272648f426071221b25b3e6081c34a4ac7f5f9d1236aa29e2756c185ea687064e4598c2342b077e4c027e6fc84ef7be9cd61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2aa59d510d07b3d6772d4d4db1cfdacc

    SHA1

    ec8bbc2713e2561b6800498be6ed63d0930a15b4

    SHA256

    68a415fa0718276c5a6d9ba18c3ee9af4f3d4e6e23aa939ba8cc52e1d6615f11

    SHA512

    710f73967394063ae5b303800498b07e621022b62c40079eef5d645363cd01d75223377ffea307749ad49255ec339ae6bcf0aa6cfec2dbc5a001ce3b9542aaa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d73895949110f8f9350770cb6ac9939

    SHA1

    c13310c163d231226d3d6d3c6631aa85669a70c2

    SHA256

    e74404ea46bf1a971974a3e049733a70883912eba4d53224196c61a4f0c59771

    SHA512

    2eabdd9413f883f160d449e159a3f4e7c247b112224a81afb8ffe3327dc599fe0a43bf6611b191add5ba64bebf8e739e2a39d10968a5a9413431ac20a53d8a4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63e9fdeb03b9c73acf4a440aa46d8fd4

    SHA1

    80b09bf3b325e6fd10bf7ef666764feb98ea574c

    SHA256

    3f583191039f4758e6c33906a996fd6dea8c0ca7372d7647878a653f5d381dd3

    SHA512

    745f4b6129a71ea1957571b496bbfef389e9f625321dc3f52899d50af7b67a607d3a694d49b74e26d61e75fe769474bbf8b357d7228a20feb9225fb767a45407

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4b56a37923796e3d5136b4cf98a4bea

    SHA1

    ae4b4d11c821ba4d7247a47c31dbe29aa2813dff

    SHA256

    4b77490dc8617b7df4f5e7ca2d38a0accf32ac0fd1865ee2b0969c61273eec92

    SHA512

    ebd632f3999a0f75c1c13530aabed1c380eccf3cf0819953025a294f145a74d2bb2066a740f73ce78559a789ef1ad295c1fe376b142391446ea522a58c370558

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e032aa01445f237a6e30f09593fda00a

    SHA1

    25f7105a5944f3996729de3372033bd0ce373a27

    SHA256

    360b45f9920ae5c1370d648fe399967a27cd16bb2b6a58461fcfb7f8a88c9217

    SHA512

    70adb5b988b54d62472e7a6eed41dcccda9e29639c2c240c4c35049674a02489c350d5f7fdf69f470cc82059f2be46cb0ca1fed7bfee065a645e57270e3c0974

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3aca406012d6374b28546f91a1800b0

    SHA1

    df550149d42a94de602e050aa8c0ce5676d570d7

    SHA256

    04a8eb8c0ff5fb93f98925ad6f0c521cd139f9fbb2aa97c2200fa14cf2ffe372

    SHA512

    e1d2799ab43f7e856f52ed7b996cddd5b05f16ff760561c6bfd624d4c3332e13ad8897016edb7b40390b3b75b055b3ea7a1ae1a3bb4f1626f87da0a235ed3aa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f73fc20a00da2eba997166e8849deb92

    SHA1

    a8cb89a9d898b94cbfdd6aec725c3c522bb0b96d

    SHA256

    fbe2f8a582e650571889fe3fd96a609ca281bf6fb8677898b0b535e754c7258c

    SHA512

    1b65b533d6eac8e6b88c26347778a0539681aaab1957c3110cb3a99b631122ef5ef8539ba5709bda67081b9c7dbbc39c9b5a40731f41aed0218c55e42094ef14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a1ae8952abea5c14d44879b56a1b0c8

    SHA1

    ec2f380d10358be7db1d599a7e529fda951c06a7

    SHA256

    783a703f018833c95e7535f7ef3a1ae6759ba37c96ef833282e65392b446ddd6

    SHA512

    1be473505b4e70b51415789732d1b5171afaca5bf9ab80a0a4688b40f5cff54a6cdef55035caf38c8726306cdc5bf61adf8c2a00b20a652a2d6b1afca8cc680a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    721c01df1f9865359d89a826b5abd630

    SHA1

    5f0b99a096f5967003a4741a3e81e36fcc2d270b

    SHA256

    5a69de813f28cc8f3ed24c5876985da6e56803b0be0afdf25e6a26b4e55a057b

    SHA512

    e5e01dd5524330a1f33aabfe0de5bb9ba90f03fc269ba9f74b140b18f0f65d44c17f7b8675e58b9b522e3c716257baa83633532c13f832074a5fe342b6518274

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83f37df01cbf9d4878a06312d8c0f81d

    SHA1

    5ad272bbd7d4ea08da636ed1dc56ed81da5a3892

    SHA256

    8b594d727dac76c31276b85c4706a715a88e71ad3c6b85496ed83e7246aee4a2

    SHA512

    2e0553d66be9ce0dec826fb31dab131837a428772b82f9a1536cd55b3a3943a47a98d5d555858a263f735e404e8fd770496d4b4ac71cdc92be7b3b71a293647b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8cff361c08b6c7662b261af1785dce23

    SHA1

    ea69883087f57e65a8df576c04e6a334001b87af

    SHA256

    bbd7ebc16cdf8e4a8ab831e989feba10bb1a23e6657eeebac23a3a845f835bde

    SHA512

    33a080aa2f85f2d430fe4b9c99ec487dc5f9ae1277f12e04a18723a3db8a7c110eecadba2ed8653c1767586a1a6fa20fffdbc502938c2f4940c01bc8437a7047

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a48e3efd25f717e918c200dc607770bc

    SHA1

    24051838eef51d9aebb3c5e68842d8d7d9a9c86f

    SHA256

    a9325df428eeac1ba6728ea3068c5b36484695734c5b3772961bc21e4be8b828

    SHA512

    283c354d87c05799c3c3e0da5100c70d11b8223644099e92733697f8aa2f43b0bada1cf52f2cdbfa0a58a5933e513d47c3f3e102fe9686b84fff8152b204acbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ad4a6aff9676c755b3b33c406f326d9

    SHA1

    e69f58f9b01e1f055708416aaf7361c40984d640

    SHA256

    5963b51bb10c453596cd7b13d0a653d24968c99d68e1c55474ef4f2ce2b50984

    SHA512

    918b6220ae805be0d3eea1ec96c1c9f177135b960ae104416e4809626af9324e192ae9ac30ddad1c683c0bfc4edbd94a534648911fd6cc0b6d47e00543c6b287

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a57bd26ab1ffef0a5e1e22c0a2e7886f

    SHA1

    ba42ccfcb0c4f2ac99c8c887076a452bcd9a5452

    SHA256

    05eace2cf9f65988f2d7e03734ea7370fe01f5c2cad08f064c38b988f328e1f6

    SHA512

    7a10a8c325ba9fc559c62b63d52d7dfb4d528e6bfd358aebae3c2898b42c3e6d68d01ffe70c73acb8bf4f9375ed10177d764a34d3a7f7e77ecab9a721c8044be

  • C:\Users\Admin\AppData\Local\Temp\CabE226.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE238.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b